1. Conduid
  2. Security
  3. Mcpvault
MCP server · Security

Mcpvault

Unclaimed last commit 6 months ago security
35Low

Scored 4 days ago · breakdown

About Mcpvault

Mcpvault is an MCP server published by thekeunpie-hash in the Security category.

The repository has 41 stars and 4 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/thekeunpie-hash/mcpvault

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mcpvault

Powered by Claude · Grounded in docs

I know everything about Mcpvault. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 3 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • !License declaredNo license file. Legally you have no right to use it in a product.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.

1 check has not been run yet.

README

⚡ MCP Vault (mcpv)

The Ultimate Performance Booster for AI Agents "Reduce system lag by 99%, eliminate loading times, and cut token costs by 90%."

License Version Python Platforms Status

[!NOTE] ✅ Cross-Platform Support MCP Vault now supports Windows, macOS, and Linux with the Antigravity agent environment.

❓ Why mcpv?

Have you ever felt this while using AI Agents (Antigravity, Cursor)?

"Why is it so heavy?"
"It froze again..."
"Why are the token costs so high?"

mcpv is not just a tool. It is a Turbo Engine for your agent.

🏎️ Overwhelming Performance Difference

Feature 😫 Without mcpv (Before) ⚡ With mcpv (After) 📈 Effect
Speed No GPU, Laggy UI Forced GPU Acceleration, Smooth 100x Perceived Speed
Scalability Truncates at 100 tools Unlimited Tools (Summary + JIT) ∞ Capacity
Loading Wait 60s+ every time Instant Startup (Local Cache) Zero Latency
Cost Resend full context Smart Block / Deduplication 90% Savings

✨ 3 Core Features

1️⃣ Booster Injection (Physical Acceleration)

"Unlock hardware limits with one line"

  • Forced GPU Activation: Injects hidden rendering acceleration flags (--enable-gpu-rasterization).
  • Permission Bypass: Drops Admin rights to fix drag-and-drop & UI bugs, and bypasses permission requests (Error 740) using RunAsInvoker.
  • Zombie Process Killer: Automatically cleans up ghost processes occupying ports.

2️⃣ Smart Valve (Cost Defense)

"Smart wallet protector that saves for you"

  • Detects the massive context data (repomix) that agents habitually request.
  • First request: Allowed (Full context provided).
  • Subsequent requests: Blocked with a 10-token "Already cached" message.
  • Physically blocks accidental token bombs.

3️⃣ Gateway Hijacking (Secure Vault)

"Stop struggling with complex configs"

  • Root Path Locking: Captures the directory where you run mcpv install and forces the agent to ALWAYS see that directory as the project root. No more "File not found" errors when the agent drifts to other folders.
  • Automatically migrates existing complex MCP settings to a secure Vault.
  • Original config is safely backed up to mcp_config.original.json.

4️⃣ Smart Router (Architectural Breakthrough)

"One Tool to Rule Them All"

  • Anti-Truncation Engine: Solves the "100-tool limit" of AI providers. Provides a compact summary of all tools, effectively supporting hundreds of upstream tools without overflowing the context.
  • Unified Interface: The agent doesn't need to know which server has which tool. It just calls run_tool(name="...").
  • Persistent Indexing: Remembers tool metadata in a local tool_index.json for lightning-fast discovery and offline capability.
  • Auto-Correction: Automatically finds the correct tool even if the agent makes a typo or tries to call a server name.

5️⃣ Admin Console (Control Center)

"Surgical Control Over Your Context"

  • mcpv_admin: A single tool to manage your entire MCP ecosystem.
  • Live Search: Find any tool by searching through descriptions across all servers.
  • Dynamic Optimization: Enable/disable servers or specific tools on-the-fly to prune the agent's context and save tokens.

🛡️ Security Features (v2.1.0)

Enterprise-grade security hardening:

Feature Protection Implementation
Race Condition Prevention Concurrent session safety Double-checked locking with asyncio.Lock
Resource Management Memory leak prevention AsyncExitStack reference tracking
Shell Injection Defense Command execution safety Dangerous character blocking (` , &, ;, `` ``, $, etc.)
Path Traversal Protection Directory escape prevention os.path.commonpath() containment validation
PowerShell Escaping Command injection prevention Backtick escaping for special characters
Error Handling Debugging visibility Specific exception types instead of bare except

📦 Installation

We recommend using uv for a fast and clean installation across all platforms.

Windows (PowerShell)

# Install using uv (Recommended)
uv pip install . --system

# OR using standard pip
pip install .

# Configure the vault
mcpv install

macOS / Linux (Bash)

# Install using uv (Recommended)
uv pip install . --system

# OR using standard pip
pip install .

# Configure the vault
python -m mcpv install

Quick Start Scripts

Platform Init Uninstall Reinstall
Windows init.ps1 uninstall.ps1 reinstall.ps1
macOS/Linux scripts/init.sh scripts/uninstall.sh scripts/reinstall.sh

🖥️ Platform Support

Platform Status Notes
Windows ✅ Full Native PowerShell scripts, OneDrive Desktop support
macOS ✅ Full Bash scripts, ~/Library paths, .command launchers
Linux ✅ Full Bash scripts, XDG directories, .desktop files

Platform-Specific Features

  • Windows: OneDrive Desktop redirect detection, PowerShell-based shortcuts (.lnk)
  • macOS: Applications folder integration, .command file launchers
  • Linux: XDG Desktop specification, .desktop file integration

💻 Commands

Command Description
mcpv install (Essential) Installs mcpv as the primary gateway, migrates existing config, and locks the current directory as the project root.
mcpv install --force Overwrites existing mcpv installation if found.
mcpv start (Internal) Starts the MCP server. Used by the Antigravity agent, not for humans.

🛠️ Verified Recommended Setup

Verified MCP server configuration used by the developer. It creates the best synergy when used with mcpv.

{
  "mcpServers": {
    "rube": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://rube.app/mcp"]
    },
    "open-aware": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://open-aware.qodo.ai/mcp"]
    },
    "context7": {
      "command": "npx",
      "args": ["-y", "@upstash/context7-mcp", "--api-key", "PUT_IN_YOUR_API_KEY_HERE"]
    },
    "sequential-thinking": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/server-sequential-thinking"]
    },
    "mcp-server-neon": {
      "disabled": false,
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.neon.tech/sse"],
      "env": {
        "NEON_API_KEY": "NEVERCHANGE_DONT_PUT_IN_ANYTHING_ELSE_THAN_ME_HERE"
      }
    }
  }
}

<br>

---


<br>

---

## ❓ Troubleshooting & FAQ

If you encounter issues, please check the specific solutions below.

### 1. ❌ "Permission Denied" during Installation
**Error Example:**
> `❌ PERMISSION DENIED: Cannot create config directory`
> `❌ PERMISSION DENIED: Cannot save root path`

**Solution:**
Windows prevents regular users from writing to protected paths.
1. Right-click your terminal (Command Prompt or PowerShell).
2. Select **"Run as Administrator"**.
3. Run `mcpv install` again.

**Verification Command:**
```powershell
# Check if you have write access (should return 'True' if Admin)
[bool](([System.Security.Principal.WindowsIdentity]::GetCurrent()).Groups -match "S-1-5-32-544")

2. ⚠️ "Running as Administrator detected" (Booster Warning)

Warning Message:

[WARNING] Running as Administrator detected!
Antigravity running as Admin may cause UI glitches...

Solution:

  • Do NOT run the booster script manually from an Admin terminal.
  • Use the Desktop Shortcut created by mcpv (Antigravity Boost (mcpv)).
  • If the shortcut still triggers the warning, right-click the shortcut → Properties → Compatibility → Uncheck "Run this program as an administrator".

Verification Command:

# If this returns a value, you are Admin (Try to run as Standard User instead)
net session

3. ⚠️ "Corrupted Config File"

Error Example:

⚠️ WARNING: Corrupted config file found

Solution: Your mcp_config.json file contains invalid JSON syntax.

  • Option A (Reset): Run mcpv install --force to completely wipe and reset the configuration.
  • Option B (Manual Fix): Open %HOMEPATH%\.gemini\antigravity\mcp_config.json and fix the syntax errors.

4. ⚠️ "Existing MCP Servers Found"

Message:

⚠️ EXISTING MCP SERVERS FOUND: ...

Solution: mcpv tries to protect your existing work.

  • Run mcpv install --force to proceed.
  • mcpv will automatically backup your old configuration to mcp_config.original.json before overwriting it.

5. ❌ "exec: npx: executable file not found"

Cause: The Agent cannot find Node.js (npx) in your system PATH.

Solution:

  1. Ensure Node.js is installed.
  2. ALWAYS start Antigravity using the Booster Shortcut (Antigravity Boost (mcpv)).
    • The booster script automatically injects the correct PATH for npx before launching the application.

Verification Commands: Run these in PowerShell to check your environment:

# 1. Check Node.js version (Must be v18+)
node -v

# 2. Check NPM version
npm -v

# 3. Check if npx is in PATH
Get-Command npx
If any of these fail, you must install **Node.js LTS** from [nodejs.org](https://nodejs.org).

<br>

---

## 🗑️ Uninstallation

If you need to remove `mcpv` and restore your original configuration, please refer to the [Uninstall Guide](UNINSTALL_KR.md).

README fetched from the repository 3 days ago. The original is authoritative.

Questions

About Mcpvault

How do I install Mcpvault?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mcpvault safe to use with an AI agent?

Its trust score is 35 out of 100 (low). It passes 4 of the 5 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mcpvault still maintained?

The last commit was 6 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.